Race Condition allows Bypass of Trust Restrictions_CVE-2025-12383

{
    "lastseen": "",
    "description": "In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain conditions, it could lead to unauthorized trust in insecure servers (see PoC)",
    "published": "2025-11-18T15:14:37.765Z",
    "modified": "2025-11-18T21:34:35.027Z",
    "type": "cve",
    "title": "Race Condition allows Bypass of Trust Restrictions",
    "source": "eclipse",
    "references": "https://gitlab.eclipse.org/security/cve-assignment/-/issues/74",
    "id": "CVE-2025-12383",
    "bulletinFamily": "",
    "cwe": [
        "CWE-362"
    ],
    "cvelist": null,
    "sourceData": "Eclipse Foundation Jersey 2.45\nEclipse Foundation Jersey 3.0.16\nEclipse Foundation Jersey 3.1.9",
    "sourceHref": "",
    "cvss": {
        "score": 9.4,
        "severity": "CRITICAL",
        "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Jersey",
    "version": "2.45",
    "vendor": "Eclipse Foundation",
    "ai_description": "A race condition in Eclipse Jersey can cause ignoring of critical SSL configurations, potentially leading to unauthorized trust in insecure servers.",
    "ai_severity": "Critical",
    "ai_vendor": "Eclipse Foundation",
    "ai_product": "Jersey",
    "ai_version": "2.45, 3.0.16, 3.1.9",
    "ai_score": 9.4
}